Open Stack

Hi Karan,

I faced a similar issue earlier. I was able to resolve this by doing the following:
1. Changing the values of url's pointing to keystone from localhost/127.0.0.1 to Machine IP address. Restart cinder service.

2.If this does not work. Then replace all the kesytone related config variables (like tenant_name, user_name, password) with the values in keystonerc_admin file created after installation, in both api-paste.ini and cinder.conf file, restart the services and then try.


Regards,
Sushma Korati
sushma_korati at persistent.co.in |
Persistent Systems Ltd. |  Partners in Innovation | www.persistentsys.com
P Please consider your environmental responsibility: Before printing this e-mail or any other document, ask yourself whether you need a hard copy.


________________________________
From: Karan Singh [ksingh at csc.fi]
Sent: Sunday, November 24, 2013 8:06 PM
To: Sushma Korati
Cc: openstack at lists.openstack.org
Subject: Re: Error with Cinder **Need Urgent help** HIGH PRIORITY

Hello Sushma

I have tried changing auth_uri and auth_host before by localhost / server real IP address but no luck.

What has to modify in keystone urls , i have same machine running keystone service.

Regards
karan





Hi Karan,

Change the values of "auth_uri = http://127.0.0.1:5000/,  auth_host = 127.0.0.1"  in cinder/api-paste.ini and cinder.conf and then try once.
1. Update the cinder.conf and cinder/api-paste.ini file. Modify keystone related urls to point to a machine where keystone service is running.
2. Restart cinder services.
3. Try executing cinder commands.



Regards,
Sushma Korati
sushma_korati at persistent.co.in |
Persistent Systems Ltd. |  Partners in Innovation | www.persistentsys.com<http://www.persistentsys.com/>
P Please consider your environmental responsibility: Before printing this e-mail or any other document, ask yourself whether you need a hard copy.


________________________________
From: Karan Singh [karan.singh at csc.fi]
Sent: Sunday, November 24, 2013 5:35 AM
To: openstack at lists.openstack.org
Subject: Re: [Openstack] Error with Cinder **Need Urgent help** HIGH PRIORITY

Please help I am in urgent need


-------- Original message --------
From: Karan Singh <ksingh at csc.fi>
Date: 23/11/2013 18:24 (GMT+02:00)
To: openstack at lists.openstack.org
Subject: Error with Cinder **Need Urgent help** HIGH PRIORITY


Hello Openstack Community Members.

I need your quick support on my issue related to Cinder.


1 . Error Logs from cinder/api.log


2013-11-23 18:08:02.037 29478 INFO urllib3.connectionpool [-] Starting new HTTP connection (1): 127.0.0.1
2013-11-23 18:08:02.100 29478 WARNING keystoneclient.middleware.auth_token [-] Unexpected response from keystone service: {u'error': {u'message': u'The request you have made requires authentication.', u'code': 401, u'title': u'Unauthorized'}}
2013-11-23 18:08:02.101 29478 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token d675640b9346a631549c85c156159fb9
2013-11-23 18:08:02.102 29478 INFO keystoneclient.middleware.auth_token [-] Invalid user token - rejecting request
2013-11-23 18:08:02.362 29478 INFO urllib3.connectionpool [-] Starting new HTTP connection (1): 127.0.0.1
2013-11-23 18:08:02.434 29478 WARNING keystoneclient.middleware.auth_token [-] Unexpected response from keystone service: {u'error': {u'message': u'The request you have made requires authentication.', u'code': 401, u'title': u'Unauthorized'}}
2013-11-23 18:08:02.435 29478 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token 03aee2508b2c4132a9c23b382c6ba284
2013-11-23 18:08:02.435 29478 INFO keystoneclient.middleware.auth_token [-] Invalid user token - rejecting request



2 . Errors from cinder list command output

[root at rdo cinder]# cinder list

ERROR: Unauthorized (HTTP 401)
[root at rdo cinder]#


3. Output from cinder/api-paste.ini


[filter:keystonecontext]
paste.filter_factory = cinder.api.middleware.auth:CinderKeystoneContext.factory

[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
service_protocol = http
service_host = 127.0.0.1
service_port = 5000
signing_dir = /var/lib/cinder

auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
admin_tenant_name = services
admin_user = cinder
admin_password = root
auth_uri = http://127.0.0.1:5000/



4. Output from cinder/cinder.conf


rootwrap_config=/etc/cinder/rootwrap.conf
sql_connection = mysql://cinder:root@localhost/cinder
api_paste_config = /etc/cinder/api-paste.ini

iscsi_helper=tgtadm
volume_name_template = volume-%s
volume_group = cinder-volumes
verbose = True
auth_strategy = keystone
#osapi_volume_listen_port=5900
[keystone_authtoken]
admin_tenant_name = services
admin_user = cinder
admin_password = root
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
signing_dirname = /tmp/keystone-signing-cinder


5. All the components from Horizon web interface works fine except , VOLUME ( cinder component ) , as soon as i click on volume it throws errors  Error: Unauthorised: Unable to retrieve volume list.  Error: Unauthorised: Unable to retrieve volume types

6. Keystone has cinder user


[root at rdo cinder]# keystone user-list
+----------------------------------+------------+---------+----------------------+
| id | name | enabled | email |
+----------------------------------+------------+---------+----------------------+
| 99f8019ba2694d78a680a5de46aa1afd | admin | True | test at test.com |
| ee6de67df5bf4498bd477e2a973f393f | alt_demo | True | |
| f632591a717c4f9b91c4ebfdc8eb86ef | ceilometer | True | ceilometer at localhost |
| be199f4da0e84abb9f0ca069f0a4b408 | cinder | True | cinder at localhost.com |
| 79071cdc981d4f5787a8d1abebac7eec | demo | True | |
| 8d8d4107a72d4cdd838f3cc8f643a0f2 | glance | True | glance at localhost |
| 901d979b861d45ada359252da45082f6 | neutron | True | neutron at localhost |
| 0e371ae93dce4ea392224354929c8257 | nova | True | nova at localhost |
| 069624d0554a432bb1f57629bde6ebc8 | swift | True | swift at localhost |
+----------------------------------+------------+---------+----------------------+
[root at rdo cinder]#


7. I am able to connect to mysql db  with user cinder and password ( root )


[root at rdo cinder]# mysql -u cinder -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 1230
Server version: 5.1.69 Source distribution

Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql>


I have set up openstack using RDO , i tried all  possible ways but cinder ( volumes ) are not working , except everything works well , please advise a solution ASAP , i am on a very tight deadline.


Waiting for your quick responses.

Karan Singh
CSC - IT Center for Science Ltd.
P.O. Box 405, FI-02101 Espoo, FINLAND
http://www.csc.fi/ | +358 (0) 503 812758



DISCLAIMER ========== This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.

DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20131125/a9fee892/attachment.html>